Polymarket Nordic Trader
AdvisoryAudited by Static analysis on Apr 30, 2026.
Overview
No suspicious patterns detected.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
If live mode is enabled, the skill can spend funds and change Polymarket positions across multiple markets.
This shows that live mode selects the real trading venue and the code programmatically submits trades. It is purpose-aligned and defaults to paper mode, but live mode can still mutate financial positions.
live=True venue="polymarket" (real trades, only with --live flag) ... r = client.trade( market_id=m.id, side=side, amount=size, ... )
Use paper mode first, set conservative position limits, and require explicit user approval before any --live run or live order placement.
A user may not realize before installation that the skill needs an API key that may authorize trading activity.
The registry-facing metadata says no credential is required, but the artifacts also show SIMMER_API_KEY is required and read by the code. For a trading bot, this is a material under-declaration of account authority.
Required env vars: none ... Env var declarations: none ... Primary credential: none
Declare SIMMER_API_KEY as a required credential, document what account authority it grants, and use a revocable, least-privilege key with spending limits if available.
Users may underestimate the code and dependency surface that will run for a financial automation skill.
This shows an external pip dependency and runnable automaton entrypoint, despite the registry summary saying there is no install spec and this is an instruction-only skill. The dependency is also unpinned.
"requires": { "env": [ "SIMMER_API_KEY" ], "pip": [ "simmer-sdk" ] }, ... "automaton": { "managed": true, "entrypoint": "trader.py" }Align registry metadata with clawhub.json, pin or otherwise verify the simmer-sdk dependency, and review the full published trader.py before enabling live trading.